Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft
File: Klbs8PH_OfsVFWANEgo0cr4UtzI.mft (raw, json)
Hash identifier: 2OHz0V0haZ78dQMaJ+1rVpKy/OevHVeVs6Xq6CsSUe8=
Subject key identifier: D2:21:50:B7:21:2B:46:BC:C4:EA:04:99:88:85:53:E8:9D:9A:CD:D2
Authority key identifier: 2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32
Certificate issuer: /CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft
Manifest number: 010C
Signing time: Fri 31 Jan 2025 04:05:12 +0000
Manifest this update: Fri 31 Jan 2025 04:05:11 +0000
Manifest next update: Fri 07 Feb 2025 04:05:11 +0000
Files and hashes: 1: Klbs8PH_OfsVFWANEgo0cr4UtzI.crl (hash: uyFf/8OhHXnQuUI/l7DLNyBGHM6rGpCTpn8ND+a4iz0=)
2: EF31E31847CE11EEB588375DC4F9AE02.roa (hash: D2jnJ061deT1FgcnPcnAa54o8jUyuQQ7FJDAZ8ZL8D4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA485/serialNumber=2A56ECF0F1FF39FB1515600D120A3472BE14B732
Validity
Not Before: Jan 31 04:05:11 2025 GMT
Not After : Feb 7 04:05:11 2025 GMT
Subject: CN=679c4bf7-97ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:e0:3f:3c:10:21:30:80:eb:c5:d6:31:2c:
12:67:da:5b:4f:c8:64:82:ad:e0:2d:f4:c3:4d:e9:
11:d9:4f:e3:38:1b:a3:71:1f:a1:7e:df:64:59:d5:
c3:4b:00:69:55:f9:25:d4:0e:87:6c:a9:e8:4f:11:
18:4d:92:97:06:3f:59:41:c3:62:33:02:10:ad:fe:
03:ad:55:1f:dd:1a:ce:38:14:1e:0c:bd:1d:22:a5:
f5:7a:16:14:2e:8f:6d:48:6f:10:3c:a2:d2:4f:dd:
a9:00:82:3a:b7:15:00:4e:28:6d:27:06:a7:af:ff:
c5:1a:80:12:bb:be:cc:86:ff:a4:64:78:a6:ae:60:
be:ea:2c:d5:0d:f4:bd:c0:74:45:1d:f6:b4:db:a7:
27:c4:67:5f:16:09:2f:e7:d3:f4:49:b1:f0:58:7f:
1a:5c:fd:61:02:2c:12:7c:c1:a2:fd:86:d1:51:c1:
2b:38:74:a0:0a:71:45:dc:54:8b:6b:6d:ee:b4:4c:
e8:49:94:d1:77:51:5d:6c:8e:78:6e:9e:95:40:c8:
e0:39:09:99:4f:fd:29:b8:b3:73:b4:7a:2a:7b:e3:
a3:ba:cd:e4:62:5a:a2:1c:a2:b7:72:1b:28:02:47:
8f:08:38:67:66:1b:42:7c:13:f1:6a:05:c8:2b:5e:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:50:B7:21:2B:46:BC:C4:EA:04:99:88:85:53:E8:9D:9A:CD:D2
X509v3 Authority Key Identifier:
keyid:2A:56:EC:F0:F1:FF:39:FB:15:15:60:0D:12:0A:34:72:BE:14:B7:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Klbs8PH_OfsVFWANEgo0cr4UtzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA485/62A9286647CE11EE86C2385CC4F9AE02/Klbs8PH_OfsVFWANEgo0cr4UtzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:c0:d0:5c:b8:dc:db:5d:9f:11:af:ed:23:30:83:e5:59:04:
51:c1:b3:e2:88:f1:76:2c:8e:fc:5a:a3:84:1a:bf:b0:4a:46:
d0:b4:a5:7e:03:d5:1f:76:1f:e2:d8:8f:3f:87:27:f5:42:2b:
a9:a7:b0:0e:21:67:4f:1f:a8:b0:24:11:a3:b1:49:f1:0a:de:
6f:dc:1a:2f:60:60:b2:99:62:e4:7b:89:a0:c5:13:62:1b:ec:
34:0d:f5:02:1b:c9:2d:56:1c:6b:59:a3:d1:25:d7:50:9e:90:
76:44:60:c1:7f:25:bc:fb:8b:a8:ac:4f:1e:d2:c9:85:c3:5c:
44:69:11:a2:ef:24:3e:8e:d5:62:ac:b2:ef:3e:73:95:25:ef:
df:b4:0b:56:1f:10:eb:63:1c:ff:6a:94:48:18:ac:b8:30:ff:
69:82:c7:d5:94:a2:7e:d8:13:41:45:59:20:42:b5:58:94:80:
7b:5b:16:46:5d:50:3a:b2:fa:26:c5:a1:31:1d:e6:c0:0b:fd:
6f:8e:77:cf:1c:56:1d:7f:d6:07:32:be:d2:0d:89:7d:d5:cd:
c2:b8:df:e6:f4:ed:85:0d:81:d9:82:78:67:82:22:00:f3:10:
60:e9:c6:68:22:48:14:31:49:1c:5a:73:09:fa:4b:83:ff:cf:
5b:75:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:09 2025 by rpki-client